Skills sharepoint-by-altf1be

Secure SharePoint file operations and Office document intelligence via Microsoft Graph API — certificate auth, Sites.Selected, read/write Word (mammoth), Excel (exceljs), PowerPoint (jszip), PDF (pdf-parse).

install
source · Clone the upstream repo
git clone https://github.com/openclaw/skills
Claude Code · Install into ~/.claude/skills/
T=$(mktemp -d) && git clone --depth=1 https://github.com/openclaw/skills "$T" && mkdir -p ~/.claude/skills && cp -r "$T/skills/abdelkrim/sharepoint-by-altf1be" ~/.claude/skills/openclaw-skills-sharepoint-by-altf1be && rm -rf "$T"
OpenClaw · Install into ~/.openclaw/skills/
T=$(mktemp -d) && git clone --depth=1 https://github.com/openclaw/skills "$T" && mkdir -p ~/.openclaw/skills && cp -r "$T/skills/abdelkrim/sharepoint-by-altf1be" ~/.openclaw/skills/openclaw-skills-sharepoint-by-altf1be && rm -rf "$T"
manifest: skills/abdelkrim/sharepoint-by-altf1be/SKILL.md
source content

SharePoint by @altf1be

Interact with SharePoint document libraries via Microsoft Graph API using certificate-based authentication.

Setup

  1. Create an Entra app with
    Sites.Selected
    permission and certificate auth
  2. Grant site-level write access via Microsoft Graph PowerShell
  3. Set environment variables (or create
    .env
    in
    {baseDir}
    ):
SP_TENANT_ID=your-azure-tenant-id
SP_CLIENT_ID=your-app-client-id
SP_CERT_PATH=/path/to/certificate.pem
SP_SITE_ID=your-sharepoint-site-id
SP_DRIVE_ID=optional-specific-drive-id
  1. Install dependencies:
    cd {baseDir} && npm install

Commands

File operations

# Show site and drive info
node {baseDir}/scripts/sharepoint.mjs info

# List files in library root
node {baseDir}/scripts/sharepoint.mjs list

# List files in a subfolder
node {baseDir}/scripts/sharepoint.mjs list --path "Meeting Notes/2026"

# Read file content (extracts text from Office formats)
node {baseDir}/scripts/sharepoint.mjs read --path "Report.docx"

# Upload a file
node {baseDir}/scripts/sharepoint.mjs upload --local ./report.docx --remote "Reports/Q1-2026.docx"

# Search for files
node {baseDir}/scripts/sharepoint.mjs search --query "quarterly review"

# Create folder
node {baseDir}/scripts/sharepoint.mjs mkdir --path "Meeting Notes/2026"

# Delete (requires --confirm flag)
node {baseDir}/scripts/sharepoint.mjs delete --path "Drafts/old-file.txt" --confirm

Coauthoring (checkout/checkin)

# Safe edit: checkout → upload modified file → checkin (recommended)
node {baseDir}/scripts/sharepoint.mjs edit --path "Report.docx" --local ./modified.docx --comment "Updated summary"

# Check out a file (lock for exclusive editing)
node {baseDir}/scripts/sharepoint.mjs checkout --path "Report.docx"

# Check in a file (unlock + publish)
node {baseDir}/scripts/sharepoint.mjs checkin --path "Report.docx" --comment "Reviewed and approved"

# Get an edit link to open in Office Online
node {baseDir}/scripts/sharepoint.mjs edit-link --path "Report.docx"

Supported Office formats

The

read
command extracts text content from:

  • .docx
    → full text extraction via mammoth
  • .xlsx
    → sheet names + cell data via exceljs
  • .pptx
    → slide text extraction via jszip
  • .pdf
    → text extraction via pdf-parse
  • .txt
    /
    .md
    → raw content

Output is plain text suitable for AI processing (summarization, reformatting, action item extraction).

Dependencies

  • @azure/identity
    — certificate-based Azure AD authentication
  • @microsoft/microsoft-graph-client
    — Microsoft Graph API client
  • mammoth
    — Word document text extraction
  • exceljs
    — Excel spreadsheet parsing
  • jszip
    — PowerPoint XML extraction
  • pdf-parse
    — PDF text extraction
  • commander
    — CLI framework
  • dotenv
    — environment variable loading

Security

  • Certificate auth only (no client secrets, no passwords)
  • Sites.Selected
    permission (access limited to one SharePoint site)
  • Path traversal prevention:
    ../
    is rejected
  • Delete requires explicit
    --confirm
    flag
  • No tokens or secrets printed to stdout
  • File size limit: configurable max (default 50MB)

Full setup guide

For complete setup from scratch (Entra app, certificate, Sites.Selected, Key Vault): See the GitHub repository README.

Author

Abdelkrim BOUJRAF — ALT-F1 SRL, Brussels 🇧🇪 X: @altf1be